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(54) SIGNATURE SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To attain a signature 
system capable of restoring a message and 
having high safety. 

SOLUTION: Mapping (f) from GF(p)xGF(p) to GF 
(p) satisfying following tow conditions to GF(p) 
is set up as a message masking expression. In 
the 1st condition, three variables (t), (j), (e) are 
not replaced by two algebraic expressions in f 
(gtyAj, myAe) and f(gtyAj, mge) in the case of 
GF(p) g, yA, m and Zq={0, 1,..., q-1} t, j, e. In 
the 2nd condition, the reverse image of r2=f(rl, 
m) is m=f-l(rl, r2). A signature expression is 
prepared by mapping ha, hb, he from GF(p)xGF 
(p)xGF(p) satisfying following expressions [1], 
[2] to GF(p). Where, hb(r2', s, l)-ha(r2', s, 1) 
*hb(rr2', ss, 1) when ha(r2', s, l)=ha(rr2', ss, 
1) and hc(r2', s, l)=hc(rr2', ss, 1) [1] and he 
(r2', s, l)-ha(r2', s, l)*hc(rr2', ss, 1) when ha 
(r2', s, l)=ha(rr2', ss, 1) and hb(r2', s, l)=hb 
(rr2', ss, 1) [2]. 
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(57) [gift] 

imm^m jarm, 2^^-tgf(p) xgf( P , 

^GF(p) A^&f ^^'yt-y^X^^tn. 

1 :GF( P ) 3g, y fl , m, Zq= { 0, l,-,q-l } 3t, j, e 

tfcfU f (g t y fl J ■ my fl e ) at/'f (g 1 yAJ , rn 

2:|sJ t< . r 2 =f(r 1 ,m)cO®«{i»=f ^(r^rj) TfcS 
lilT^K 2£S*rfGF( P ) XGF(p) XGF( P ) *^GF 
(p) ^^ftha, hb, hcfcTgfcaSfcfls*. 

1. ha(r 2 ' ,s,l)=ha(rr 2 ' ,ss, 1) , hc(r 2 ' ,s, l)=hc(rr 2 ' , 
ss, 1) C7) t £ hb(r 2 ' ,s, 1) -ha (r 2 ' , s, 1) ^hb(rr 2 ' , ss, 1) 

2. ha(r 2 ',s,l)=ha(rr 2 ',ss,l), hb(r 2 ' ,s,l)=hb(rr 2 ' , 
ss, 1) CT) t % he (r 2 ' , s , 1) -ha (r 2 ' , s, 1) ^hc (rr 2 ' , ss, 1) 



^b ) 















U*r,*l)=r,-h+l 
\WV.l)=s 


|B*ft:x A | 


\ 










2-2.r 2 =l(r 1 rt«idp) 
2-4.sks( r! + s +l]+r2i 4 










(3) -><?+: -ySU 
l.,£r z 4 WJSStjgH 

■ fVi.r 2 )sm(mod p) 
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irnmu p mwt u mwp) m&s t 

U -f^fSI^q iL. 

GF( P ) ±S«S^SS^^^^T, ^,L^v£2r 
m eGF(p) 

k m^mm^ztmmtL, ri = g k (mod P ) 
m^m&mzmt ^s^Myftu gf( P ) x 

GF(p) *^GF( P ) A.^ft^f fc-fSt^ 

rjfcm £f tiO^BSLfcfG-j, i)JM^-Ci*4i» 

anfetts^ v^-'jmti «imfc~rz>x v^-wx 

[|f*iM2 ] p £fgfct Ls r &IESiEt L. ^PUfr 

GF( P - ) <7)jvig kl, ^<7)\tm<\ tL, GF( P r ) _h 
£Kil^«MI:iiK, #&Lfc^*£i e GF (p 

=g k (mod p ) >y h^yht L, GF(p r ) XGF 

(P r ) *>6GF(p r ) ^^fi&f^L, GF( P r ) 
RBBRZ pr = {0,1, -,p*-i } *ua?tt£*fc-t4f:&, 

l/c 7T (f ! ( ri , m) ) mv^xm^^mmzmh * •/ 
; t mmt La.* v±-i?ffimm%iift. 

[||*IS3] P £*SfefcU M6*GF( P ) _h^*§il 
fcffiRftMteE t U 

E(GF(p))^tcS:G fcU *tf>ffift£q i:U 

E (GF ( P ) ) *l4#&fra££t5 I v£\ #fe Ufc V vfc 

£m £GF(p) fc-fSfctL 

k £W4^f£S^tSSLfCtL, Ri=kG=(r K , ry) 
E(GF(p))xGF(p) 3&^GF( P ) WMto&k ?& t # , R 

] p Wit L. r £jESi£fc L. #Pfi* 

GF(p r ) igmztuznmmv tL, 

E(GF( P ^ ))^7C^G tL, MiS&q tL, 

E(GF( P ^ JJJJg^ftSS^^fcfcVv^ m&Ltz^ 

X£m eGF(p^ ) fc-f&fcg^ 

k 1tm%%mmiZtWitL, ^ =kG=(r s , r y ) 
E(GF( P r ))XGF( P ^ ) #»Ji>GF(p* ) ^C^t^t^S 

tL, gf( p - ) j&^bbsiz pr ^?«^7rfr^t 
^l^tt(f 1 (r 1 , m)) zm^xmz&j&miz&vh 

[ff*If 5] ^flf (4, GF( P ) 3g, y fl &tf m, Mtf 
tZq= {0, q-1} 3t, j&y'e tML, 



f(g ' y i L my A e ) &Zff(g 1 y A i , mg e ) 
*H vr\ 3 j , eifi 2 ffl^jfc^NBftT * l> £ 

t itmmt Ltzmm. 1 laa^MEMi^M^ffl^/ss 

[iM6] W iix GF( P ^ ) 3g, y fl Stfm.Mtf 

t z q = {o,i,-, q-n at, jatfe izML. 

fi (s* y a j .my a e ) St^fi («' y » j , « e ) fcfc 

v^t. 3 ma, j,e&2 m^mi^ximmTh hit 
zwskt Lfzmsm 2 §smm&m$m*m^tim% 

M, 

] mm (4. E(GF( P )) 3G atPY fl , GF 

(p)9i,ty|: z q = {0,l,-,q-l} at, j&Ve 
L, 

F (tG+jY fl , m Xx(eY A ))Rtff (tG+jy s , m Xx(eG)) 

g>&zb&mtb Lfzimmnmcom&mmmm 

[11*118] ^ftFliix E(GF( P ^ ))3G MPi A , GF 
( P r ) 3m,MtM: Z q = {0,l,--,q-l} 3t, j&t/e [Z 
ML. 

f (tG+jY A , n Xx(eY A »Stff (tG+jY fl , m Xx(eG)) 

z\ t mmt vamm imcom&mmimm^fz 

[M*S9] W {4, GF( P ) 9n, r 2 , m, g&^V 
a £*fU r 2 =f(r 1 ,m)i0jlf£2:m=f -i( ri ,r 2 ) TSitf 

f -i(ri/g, r 2 )^^(m,g) 

Riff -U^/y A , r 2 ) *0(m,y A ) 

b%izb mmt Ltzmm 1 tmmmmmmz 
m^tzm^^, 

immi 0] Wjli, GF( P ^ ) 3 ri , r 2 , m, g, 
y fl K*fL, r^f^r^m) ^jtm&m^r 1 ,r 2 ) T"g 

fi" 1 (ri/g, r 2 ) ^0 (m,g) 
S.V'fr 1 (r 1 /y A , r 2 ) ^0(m,y A ) 

ttahcxt mmt Ltzmm, 2 tm^mm.mmmz 
m^tzm^tt. 

immi 1 3 mm e(gf( P » sri, y a aw 

MtfKGF(p) 3 ml^C^tL, r 2 =f(R 1 ,m)«t^m= 
f - 1 (Ri , r 2 ) S t £ . S^) 2 «4S ^> , ^ 

izMLX 

f _1 (Ri~G, r 2 )^^>(m,G) 

Mfi _1 (Ri~Y a . r 2 ) ^^(m,Y A ) 

[If*Hl 2 ] Wi(±. E(GF( P ^ )) 3Rj , Y a Jhlf 
G MVtGF( P ' ) 3mS.VV 2 (^L, r 2 =f(R 1 ,m)c7) J iif ; 
^m=f " i (R t , r 2 ) T'£«t--5 t § . HMcD 2 $&m& 
<t>, tfl/ZMLX 
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f -!(Ri-G, r 2 )*<Mm,G) 

Wfi "URi-Y fl , r 2 ) ^(m,Y A ) 

t z k mmb LtzmmAtm^mm.mimmit 

immi 3] W 14, (r, y)^r +y(GF( P ) ±<7) 

jng) T«§ix^» z t mm ixmrn i ib»«d* 

[11*1114] ^ftfia, (r, y)^r +y(GF(p- ) ± 

^jpjr) T&m^tLi z t mmb itzm%m2$m<7) 
umm 1 5 ] mm it. mmm ^mmmzm 

^X. (R, y)-x(R)+y(GF( P ) ±^JnJT) 

c: t mmb LKmm3mwDx ■v*- i Jm7tmm& 
nmm 1 6 ] «± , ft pwiuo xint^i 

V^T, (R, y)^x(R)+y(GF( P ' ) ^JnJt) 

hzb mmb itzm^MA mm?)* t-vwtmm 

£GF(p* ) ^GF( P )±^«Efc-ri»fc#, GF( P r)<7)7Cx 
=x 1 a 1 +---+X r a, ( X; , x r eGF(p))H*f 

L-T, 

It ( X) =Xi+X 2 P+ ■■■+X rP 1-1 

im& is] P u mm<p) co^g 

GF( P ) J^*3;ftS#£;kESX$3Vvt. #&£A Olffig 
H£x fl , «Jy s =?«a, #&Lfclvfc£i £G 
F(p) t-tSi^ k £#%^M£ttfclMiU r 
2 ^rJSy h^yhr 1= gk fcm DI+m§^-?»GF( P ) 
COTUbL, r 2 ' = r 2 (mod q) fc U 

ha, hb, hcmmmi q xz q xz q *>^z , a^>^« 

b-fhb%, #feiC*, 

ha(r 2 ' ,s,l)k = hb(r 2 ',s,l) + hc(r 2 ' ,s,l)x A (mod 
q) 

'y^-s;ft7C»S}>iL 

imm 19] P u r ziEmmb u 

*GF( P - ) (QjuZgtl. ^im^ fcU 
GF( P ^ ) ±£^?^5#fe^fc:t3V^, #&fA (7)15 
X^l'rx fl , &|»Si£y fl =?*kU mZUzUjcZm 
e GF(p r ) t-rsf:^, 

k zm^mmmz t ssua t u r^ns^Myb 

r 1= g kfcm ti:OftJr$n§«lZ pr C07UtU r 2 ' 
=r 2 (mod q) t 

ha, hb, hc^^SZ , XZ q XZ q ipt>Z q Auo^lft 

b-tlb£. m%&£. 

ha(r 2 ',s,l)k = hb(r 2 ',s,l) + he (r 2 ' , s, l)x fl (mod 



q) 

a*?,* riftci no t«tJ e: t mmb lk* 

0 ] P £»l£fc U «£GF( P ) ±Jg«§ 
ti/xflfPfflli^E t U 
E(GF( P ))c?)7t^G fcU •f^em^q tU 
E(GF(p))±S»Sifll.^^tfcV^T, W^Lfclv*: 
£m eGF(p) fc-tftfcS. 

k g^^^'ffEt t l>SLI4 1 L . r 2 J a 5 y h * y h 
Ri=kG tm (;i l 9ltm$ill>GF(p) ^TUtL. r 2 ' =r t 
(mod q) 

ha, hb, hc£MSt!Z q XZ q XZ 5 frt>Z q ^^ft 
ha(r 2 ',s,l)k = hb(r 2 ,s,l) + hc(r 2 ',s,l)x A (mod 

q) rfp&s mm-?* izmtfL-tz - 1 l 

[ft*H2 1 ] p U r ^ISSt L. *Pfi 

*GF(P r ) ±.jmztitzmmmz tt. 

E(GF( P ^ ))(7)7U^G fct, ^r^fiii^q fcL. 
E(GF( P ^ ))±£«$ft!,)I£^fci^T, 
^&m e GF (p r ) t&t*. 

R,=kG tm tcj;0lt»:S^I>*PS3lZ pr ^7CtL. r 2 ' 
=r 2 (mod q) t L, 

ha, hb, hc^^TM , XZ, XZ q 3&»&Z , 
ha(r 2 ',s,l)k = hb(r 2 ',s,l) + hc(r 2 ' ,s, l)x fl (mod 
f^-y^-^lTES^^. 

[11*112 2] ^flha.hb, he (4, r 2 ',s &Z q COtC 

q «7Urr 2 ', sst^LT, i^l^Wftt 

1. ha(r 2 ' ,s, l)=ha(rr 2 ' ,ss,l) , he (r 2 ' , s, l)=hc (rr 2 ' , 
ss,l) 

hb(r 2 ',s,l)-ha(r 2 ',s,l)^hb(rr 2 ',ss,l) 

2. ha(r 2 ',s,l)=ha(rr 2 ',ss,l), hb(r 2 ' , s, l)=hb(rr 2 ' , 
ss,l) <P0t§ 

hc(r 2 ' ,s, l)-ha(r 2 ' ,s,l) ^hc(rr 2 ' ,ss,l) 

•kwfcth zb&mt itzmmn 1 s , r i 9 . ^1 2 
o%L<imm,2iimmmmmmim^zm% 

[ff*H2 3] ^fiha,hb,hc(4. 
ha(r 2 ',s,l)=r2', hc(r 2 ' ,s,l)=st L, 
hb(r 2 ',s,l) (4, 

r 2 '=rr 2 ', s=ssi7)t # . hb(r 2 ' ,s,l)=hb(rr 2 ' ,ss, 1) , 
r 2 '=rr 2 ', hb(r 2 ' , s, l)=hb(rr 2 ' ,ss,l) <7)b% . s=ss, 
hb(0, 0, 1) *0, 

mtz-tz b mmb itztmm 2$m^s v-t-i? 

[HS3S2 4] ^fiha,hb,hc(4. 
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ha(r 2 ' ,s,l)=s, hc(r 2 ' ,s,l)=r 2 ' b V, 
hb(r 2 ',s,l) (J, 

s=ss, r 2 '=rr 2 ', COb # „ hb(r 2 ' ,s, l)=hb(rr 2 ' ,ss,l) 

s=ss, hb(r 2 ',s,l)=hb(rr 2 ',ss,l) CO b ^ , r 2 '=rr 2 \ 
hb(0, 0, 1) ^0 

mtz-tz b zmmb uzmm%2 nmco* 

[11*112 5] ^flha,hb,hci4, 
ha(r 2 ' ,s,l)=s, hb(r 2 ' ,s,l)=r 2 ' b L, 
hc(r 2 ',s,l) (4, 

r ;: ' =rr ; > ' , s=ssiO ^ § , he (r 2 ' , s , 1) =hc (rr 2 ' , ss, 1) . 
s=ss, hc(r 2 ' ,s, l)=hc(rr 2 ' ,ss,l) (7)b% , r 2 '=rr 2 ' 
hc(0, 0, 1) ^0 

Wc-r - t mmb t^fi *H2 2tmco* -y-t-^ 

[ff*Ifl2 6] ^ftha,hb,hci4. 
ha(r 2 ' ,s,l)=r 2 ' , hb(r 2 ' ,s, l)=sb L • „ 
hc(r 2 ',s,l) (4, 

r 2 '=rr 2 ', s=ssC0b% , hc(r 2 ' ,s, l)=hc(rr 2 ' ,ss, 1) , 
r 2 '=rr 2 ', hc(r 2 ' ,s,l)=hc(rr 2 ' ,ss,l) CDfceKs=ss, 
hc(0, 0, 1) ^0 

mtztz b mm itzmmi2 2%mco* -v^-v 

[ff*Ijf2 7] »a,hb,hc<4, 
hc(r 2 ',s,l)=s, hb(r 2 ' ,s,l)=r 2 ' b U 
ha(r 2 ',s,l) (4. 

r 2 '=rr 2 ', ha(r 2 ' ,s,l)=ha(rr 2 ' ,ss, 1) C0t#,s=ss, 
s=ss, ha(r 2 ' ,s, l)=ha(rr 2 ' ,ss,l) C0b% . r 2 '=rr 2 \ 
ha(0,0,l) *0 

fcStfc-f -I t Ucff*Jf 2 2fStt^^ -y-t-y 

[11*112 8] »a,hb,hc(4, 
hc(r 2 ',s,l)=r 2 ', hb(r 2 ' ,s, l)=sfc t, 
ha(r 2 ',s,l) (4, 

r 2 '=rr 2 ', ha(r 2 ' ,s,l)=ha(rr 2 ' ,ss, 1) (7)tc ; .s=ss v 
s=ss, ha(r 2 ',s,l)=ha(rr 2 ',ss,l)<7)ifs, r 2 '=rr 2 ', 
ha(0,0,l) *0 

iffi/z-rz b mmb itzmsm 2taa^ -v^j 

[ff*Ijf2 9] «ib(r 2 ',s,l) (4, 
hb(r 2 ',s,l)=r 2 ' +s +1 

XimZKhc\b*mLb L£fit*lB2 3^L<f4if* 
H?2 4 m&x v 

[ITOBO] ^fihb(r 2 ',s,l) {4, 
hb(r 2 ' ,s,l)=r 2 ' Xs +1 

II 2 4 f2«<^ «y *-MI^M. 
[11*313 1] «ic(r 2 ',s,l) {4, 
hc(r 2 ',s,l)=r 2 ' +s +1 



[ft*If3 2] ¥flhc(r 2 ',s,l) (4. 
hc(r 2 ' ,s, l)=r 2 ' Xs +1 

z*}mztiz> c\bmmb Ltzmim 2 5 m l < mat 

[It*If33] ^fiha(r 2 ',s,l) (4. ha(r 2 ' ,s, 1)=0 

b%m(r 2 • , s ) tfvy hoo^m^z'fct&^mmrsT 
rnxLTZ izbzmmb ttzmmn 2 7mi< imsm 
2 s^mco* v±-vwcmm%,i?&. 

[»I3 4 ] SLSk £ . ^ •y^-i>'VX^^T'ffE 
ha(r 2 ',s,l) +0 

t'feS i 5 HKoT < 5 £ t L/i!f*JM3 3 IB 

mcotv^-vmmm^^ 

imms 5] ?«ha(r 2 ',s,l) (4. 
ha(r 2 ' ,s, l)=r 2 ' +s+l Z'foh Z. bZW&b L^ff*Il3 

[ff*If3 6] ?«ha(r 2 ',s,l) (4. 
ha(r 2 ',s,l)=r 2 ' Xs +1 TftS i b LfcU* 
IR 3 4 tBf5^ ~/±-VfflmmZJr&. 

[§t*H3 7] P zmmbi, q ?)i/4i3±k%i 

ISBftfcU *1#=GF( P ) eofflRtfq t&l>7c£g b 
U 

GF( P ) JJgfcSfifcSfefcSfctsivc, W£Uc k v££ 

i eGF(p) fc-M>i#. SjRk 

g k fcm ^>9fl§lj!c$*l&GF(p) C0j€r 2 ti\ 

0< r 2 <q fcft&id^fcO. 

±.mmmfcztitzr 2 zmmizm^&z t Mi 

CWI3 s] P r«sst r zjmmb I. q * 
p b±^zmmmtx-hz>, t^bh? ~q t^^iE 

StSchL, ^Pfi#cGF( P ^ ) ^fil^iq t^l>7U^g t 

L, 

GF( pI ) JiS^flS^^ttSV^T, m^ltzUjC 
*m sGF(p r ) t^l>t#.SL»^. a^yh^yh 
r t =g k tm tiOffi^^iSZ pr = {0,1, -.P 1 " 1 } 

0< r 2 <q t^i, iatt 

±mmm^ti?zr 2 m^m^ic\bm'&b 

[ff*H3 9 ] P §r«i£fc *P1#:GF(p) ±Jg«§ 

e(gf(p))£Dtu&g tL, ^fim^q bl, 

E(GF( P ))±£«Sifl^g^^tfc^T, W^SLfcV^ 
&m eGF(p) SU&k ^, 3S.yh^yb ri 

0< r 2 <q t^l, ±5(Cfc 0, 
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im&4 o ] p mmk i . r ijEmmt u *re 

#:GF( pr ) J^a§^flfRMl£E fcU 

E(GF( P ^ ))^tc£G fcU ^crymmi k L. 

E(GF( P ^ ))±£«S;?l£#%^fci^T. §£L^ 

££m eGF( P ^ ) fc^Sfc^ » 3S-/f^y 

hr!=g h fcm CiDffifiScStlSZ pr = {0,1,-, 

P r_1 } c?)7Cr 2 ^\ 

0< r 2 <q ttt&XolZt^ . 

[IMH4 1 ] mmm \z. 
Ttemm&P fciSGF(p) ±.<?)mpim»&mmzb* 

urnm 2 ] mzuzuxn t*tu ■ o>vy ^ 

PMIhash (m) fcntftfSfc "3 tfflV^ t-lb iffl&t tfc 
!f*i!K |b]2, [sj3 . |h]4. |h]18. |sjl 9. [aj 2 
0. IWI2K IHI37. ISI38. |B|3 9^L<«i:lf*i«4 

imtmi 3 ] P mmt u w*gf( P ) 

GF( P ) ±S*SS^6#*^^fc^T, »fe#A co%m 
F(p) t^StS, 

k mzmmmzkmrnki, as^My^ 

=r! (mod q), m' =m (mod q) fc 
ha, hb, hc£*|gae q XZ q XZ , *>£>Z , Wiffi 

k^hk%. m%&*. 

ha(rj ' ,s,m' )k = hb(rj ' ,s,m' ) + hc(r L ' ,s, in' )x A <m 
od q) 

&$>s mm-$ h x o immti «= t mmb mm 

[||*IS4 4 ] p fcS&i: U r ^lESici; U ^TPJ5 
ftGF( P ^ ) m&stL. MiS&q fcU 
GF( P - ) J^fgSftS^fetfoStiSlvt, g^*A tfjfg 

eGF( P r ) kt&k%, 

k £ W£:f tfffii \z kU\MkL, ^S.yMyk^g 

k tu gf( p ^ ) ip^mm tI ^mmnb-thb 

Ti =it{ri) (modq), m' = % (m) (mod q) k L. 
ha, hb, hcMIHZ q XZ q XZ q fr&Z q s^mt 

k^-hk%, 

ha(ri ' ,s,m' )k = hb(r 1 ',s,m') + hc(ri ' ,s,m' )x fl (m 
od q) 

[11*114 5 ] p U W&m(p) 

E(GF(p))07C^G fcU *tf)fl3S£q fcU 



E(GF(p))JJ^S*lS#fe&^fc:tSVVt, »*LfcV^ 
£m eGF(p) t^l>fcK 

k &S^^ttEtt-Saf*t rJS -yh^yfR^k 
G E(GF( P ))i^GF(p) ^W&pfc-tfifcS. 
rl' =p(Rj) (modq), m' =m (modq) k 
ha, hb, hc^lffSggZ , XZ, XZ q j&»jJ>Z , ^\^ft 

ha(r! ' ,s,m')k = hbO^ ' ,s,m') + hcd^ ' ,s,m')x fl (m 
od q) 

&?>s mn.?z hi.o m$t-t& ; t mmk tfzm 

[ft*H4 6 ] p r ZJBmb l. *Pfi 

*gf(p^ ) tzimziifzmmmz ti. 

E(GF( P ^ ))cotc^G fcL, ^cofiSc^q fcL. 

E(GF(p r ))±5g«§tH>W^^tfc^T. W^Lfc^ 

££m e GF (p 1 ) i-f&tK 

k ^^^ffimtfcSSlllt L. 35'yh^yhRi=k 

G fcU E (GF (p 1 ))^GF(p r ) ^^fl&pfc-ri,t 

L. GF( P i ) A^M&ilZ pr = {0,1, ■■■,p r - 1 } *\<m- 

m^nk-ftk^. 

r, ' =tt( p(R[)) (mod q) , m' =7t(m) (modq) 
kL. 

ha, hb, hci^mm , XZ q XZ q *>^Z q ^\^fl 

ha(ri ' ,s,m')k = hb(ri',s,m') + hc(ri ' ,s,m')x fl (m 
od q) 

ymmmm^mv^x, r ^x(R)^t<{4R^y (r) t 
jmzni z k mmk vtzmm 5mv < \mm 
4 6Ie»ct)x >y±-vmmm%i?&. 

[1**114 8] m%7t\^ {«! , a 2 , -, a, } 
^GF( P ^ ) cOGF(p)±omiEfct-!>fc#. GF( P ^ ) c?)7U 
x=x 1 a 1 +---+X r a I ( xj , x r eGF(p))C 

7T ( X) =X 1 +X 2 f>+ ■■■+X r p 1-1 

x'^m^K6 z k mmk itzmsm4 4&xmm4 
immM&tffiii 

[000 1] 

mmt, mz, mmmrmtt^mmmk ixm 

[0002] 

( wmmimm ) ^mwmzmmmm & mm . 
$mx*i±%tz&r 1 1 HRumi t (iwv ^fcv ^tx 
t-r. mmizmmmffih^x&m^ ^J?>m 
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z&mmm^m^-mmz^ vet* . bp 
mxn. ^wt txmmm-. A^mcm nam 

*§Wk J ^Sfl^Mf 1986¥. HKlWtfc 
LTi±, ft* ruf^Rjij PMafij 19 8 0 

[00 03] HRt&SSfifcr 4 ^^/WiftHI 

sit j: i^ii^it $> s i Mtmt mz i ^. jift5t<7) 

^V^^tR6±-fS £ fc iifflitT"^, £«0fc*. 

^Wdcfe«t^->t^i.. ££t, m&mmmtt 
mm? u^xh h . a ^^MSfiafi^ t a , 

ifflfflLfc^* 1 **. *LT. £^lfl»f^i:S 
^(4, NTTf^ifV^/HfitJ:^ Blft 
£k^g^ffl#i aft^T 3 ^£t < aftffl#^ 

it Lfrmmmmmzm^miiz^x^mmzm 

kXfo affffl^£"t tM=5r4Btf«*S«t* 

[ o o o 4 ] iiir, zmttmmnmmismi:^ 

( 1 ) m^^^mmm&mmitimmm 

-b^-y-fryK ^yrb^t-f " (Nea 

I koblitz , " A Course in Number Theoryand Cryptog 
raphy ", Springer-Verlag, 1987) [Z%i L < ^tlX \ > 

4. 

g^«(mod p) ttS 5 £CD*§£\ gtp 

l , p ^ 1 4 o frrS^«s t & § t , AMitma^) 

H31L^BT"t, gtpt or j^&u <7)ti®|t 
-CftS. £ix(4TS, 2o«itrtsmtlrt 

4 0ffi£fth%ix(i\ «ti 2 8 Offifc £fl*> 
• ■J J .;^>rttiM: Orts £*ft£^ii:fflIKr£ t tiR 

( 2 ) fin«±^siMAr a iM&ffiML/is;^am^ 

a. 

[0005] LfrL%tft>. )k^±m\mmmt* 
mm) %®mix. gfcpfcat^jtffiw^^tm; 



ay-h LXli. mmp £ 1 4 o^ss^t W£< 2 o 
o *m&Hz±z v ^ t -r s £ t * w t . ^ 

[0006] ztimtiib. mR#m&mmLt:wm 

(Mil) (gf ( q ) } mm. -t^b^wsm 
mnffl&Mmtz^xmwtz. eigf ( q ) j« 
m&Jzz %mmxmti&jiB p y h . d 

(iffiK^sfiasfc-ti. £^t#, BPtdt^td- 
BP^im-r^ (BP^dHjp^i,) <7)(4^rs>5. 

LfrU E {GF (q) } C^ifetlfcjcQkBPtW 
Q=d ■ BP 

fc=3:Si«aRd*tfiq£i-S^^d^ftJ:i:V^raiffl 
ii. tUMW^Lfc^HTfc B P^q m&3 0MfU& 

(n&fmttt^^mw.xfoh « srti, ££^bp 

[0007] W±-T\ Hl^aff^^effiiOifi&IMBJIi 

( 3 ) #&, isnafi 

U ti-nf V«ft*«k uw iffiffl LT^Maff&Wt 
SWUI^Uffl^jL— f VfcS ^iiJL— fUXhl £ 

> riMti. £ , -ttcbhm^zxmmmm-t 

[0008] £ct)*|^-, jl— f u ta-fV t **HSS, 

ti c> b x o Bi^wafi tfc ^xbimtftt. £ 
xm^. mm^ommm^tixv^h. m^M 

Wto^T, 2, 3S^H-&. 

b. m&>--mfflmFb. mmmx^-^\mm 
FtA*L£t^ft7j{iY=F (x) btttQmm^ 

m-n>&3--mzmm-z>« 
[0009] mz. mmzmLx, mm^^mm 

x=S (x, y, k, ID U ) CO 
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m& t (k) . i^ktiasit 

[ooio] ^-vvirinmtzzvfzmfflmm 

%h%, x— fuy;, BjaEfflaBHttl/t, ^<7»i! 
x £ pfE-*ftttP**F tA* Lfc t § ^ffi^fiy „ = 
F (x) ££j£U 3ifIffl^fc3r£x-HfVfcMLT. 

i^^im ffifc lt , %<r>mm.y t mmm i d u 

fcy u ^W^y^Wl^ffl^tTlK^-r*. 

[ooin if vii, jL—r u*»6^«ssg*^mff 

«IDuJ: ^^^a^tWIA P L <7)ffi;MI 
C = P (Y, y, IDu) £4jfct£:iCD±t\ 

*ifcx-if uo&Hitc fc 1uiaf£fiEm«y u £ibK 

ti*fi=§f ax~f uxhit wt> i . 

[0012] dftfc: i 0 . J--r'ViiffltIffi#«Mf L 
[ 0 0 1 3 3 ifcfc, Mtt6%WSst Wit LTO# 

HOfg^tLTii, Ytt, xS;Y=F (X) = g« (mo 

d P ) mm^hti. k u (4a«5fe4»t J: mm 

fl, Yull SYusgAku (mod P ) fcJ Off 
JtU xultSxusSfX, yu, ku, IDu) 
=XXyu+kuXlDu (mod 0), (^CC, 

4>\ipm4?-mm§.) mzxmm^ Puii 

3^Pu=P(Y, yu, IDu)=(YAyu)x(y 
uAIDu) (mod p ) 

it, mmx-fommcomx < oA^\^^com%tmz 
mtcw§kcom$ki\^\ nt\ii> (p) =p-i, 0 

(6) =2 (&. It 5) , (10) =4 K 
3. 7, 9) fiE«5^«^2o«^ 
utv«;(l uA(t (v) -1=0 (mod v) 

b^mmmz&UL-ft mm.. 3^ :i, -'-i - 3 

* -1=8 0 = 0 (mod 10) SIS 
Pto^tit ^fn» -1=0 (mod P ) fc&>?, £ 

nfcfcTLTn" -1 = 0 (mod n) #jfc£L£w5:£> 

AiiSA-Cfi:. a-f-'Uta-Hfw, x— f V b x-nfw 
t (±ffl5t:SiE** J fiHS , r & £ £\ x-nfu fc x— f V fc 

m&0mm&mt%&. zLxztin, mf (x- 



[ 0 0 1 4 ] 3rfc. f«)FW. Mto 

1 rCttm»tt*A#. ^iff 2-324479^ 

(4) ^v^-'jwm^ 

mz. mz^xcnwm-t ix. «i 
tzwmmth* -y^juimmnz^xim-f 
z„ 

[0015] 1 99 3^tNyberg-Rue PP elt i OBIiW 

ti, Nyberg and Rueppel ,"A new signature scheme has 
ed on Hie D5A giving message recovery", 1st ACM Con 
f. on Comp. and Comm. Security, 1993 i^ffi^flfz 

VV, 

(^v^-^fl7cSg^!ie*M) H3ii, ffcfcKWi: 
L*C<7). ±iaNyberg-Rue P pel^t^(tS^ -yb-'JW. 

[ o o 1 6 ] ot, *ia£#$L&a*&ft*M?>#Ji£ 

( 1 ) ^y^-^il.™^ 

P GF( P ) ^)7U^g tizmmq fctS. -b 

y^H±, i/XfA^7^-^i: LTp , q , g Sr^x 

mz&mt&» 

( 2 ) x-4f Aizx imm&s&b'mmnmmsz 
[0017] ^iifi^ftai-^x— r ^^s* 

Z0>l3tox~-fA^ Sffixj Z\tlZ 
(mod PjtiO***. St-fey^-*igiLT, ^x 

— tf (cx-nf A«4^H^y a i^m-th . 

( 3 ) 3.--fAtzj:z>w%,v>&]&mmm. 
[oois] x— f b cif£. iswaff^fi^tf a x 

-ifAii, jrF«i^T3 0 

1. SLli[k^4^$-frl> 0 

2. ^^ta wrvmitefTo . .Luzmmm 

rj =g k (mod p) 

r 2 =m/r 1 (mod p)--(a) 

r 2 ' =r 2 (mod q) 

s -r 2 ' x s (mod q)-(b) SfHt-fi. 
[00 19] 3. X-Hf A{i(r 2 , s)*, X— tfBfcil 

(4 ) x— !TBfcJ:£gfiLfc* y-t-WQQt 
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1 ■ g s y fl r2 ' r 2= m (» d p) 

-;T\ ±far 1 (±3 5.yh^yftD?(m. (a) 
t-y'7X^S, (b){i#&$fcD¥l£fU. 

[0020] #*^frnT*ofctttm 

fc#&3$(b) (iJrR>±3fc6 ( = 3 ! ) SUco^- 

ak = b + cx a (modq), (a,b,c) = (l,r 2 ',s)COffift- 

<b') 

[00 2 1 ] 

[fg0J«*LJ;3k-ri»liM] Lfrbfr*^ i<7)# 

Jfeffl?)* -/•fe-^'fXTUffiW^^LTIi, 5^ ( a ) t 

( b ) mmtz^mm^Th o , mary* &i? 

g # StMV'fc mtO^T *>3&S^ 3 38ft «fc 

recovery-equal. ion attack using g and yA, signature 
-equation attackusing g and yA.and homomorphism at 

tack (# r g fcy fl £ffiJfll,fcB£ft*j , r sfcy 

*) J tfm&tit:. Mz^xmKii. W& % 

fflBR-fe* i'Jf< 1 9 9 5, 7 fl&lXNy 
bergand Rueppel, "A new signature scheme based on 
the DSA giving message recovery", 1st ACM Conf. 
on Comp. and Comm. Security, I993.$.l/Nyberg andRu 
eppel, "Message recovery for signature schemes bas 
ed on the discrete logarithm problem", Advances in 
cryptology-Proceedings of Eurocrypt' 94, Lecture Not 
es in Computer Science, 950(1995), Springer-Varla 

g, lfi2-193£#flSS*ifcV\ fcis, 

[00 22] ^tl^zMlX , &fcj*^4%£tt£5fl|ffl 
t^Ij(S (redundancy attack) ftfflEfh, 

ntLw ^frfafc\^^mmwizi±pi±5 i2t" 7 
k 1 0 24t".y hmmmmmm$tiz>ii\ q«i 

r 2 ' =r 2 (mod q) <755$?J±, pfilTCr, ' 

[ 0 0 2 3 ] 4\ mj&#3&«-o<7)g^(rj , s) £^fcl,>fi 
rr 2 =r 2 '+q (mod p) (ZllZ^ r r 2 fcii 

r 2 w^^Eift-rs. ) 

mm=rr 2 X (m/r 2 ) (i^fc, mmill m<7)^SrE 



[0024] iW:»)«S£L!5 
[002 5] ^LT. iil^ihtt, ffHffliMffl 

§it, c.cofzibz.comnm^x'iY^kffbi^rz a 
zcom&mimwmz (^v^-^mjtx^^ 
#&) \z\mm%%^c.ktfhfr'>x^h , La»u 

[0026] i^*M^fc{fi»r 0 m*&ie 

[ 0 0 2 7] 

[ mmmm-tt fc*>«o#a 3 it s 

(i. p £*»fcU *RS*gf(p) ^)7C&g fc U ^Ofi 

it&q tu gf(p) ttmzn&mzi&uzti^x * m 

fcvvfc*« eGF(p) fc-tSfcS, k ^W^^'fiEtt 
SflJRi: L . 3$ > y y bn=g k t U rj ' =n (m 
od q), m' =m(mod q) tL, ha, hb, hc^^RgiiZ q 

XZ q XZ q , ^^fttt-^t^. mziftz. 

ha(r[ ',s,m')k = hb(rj ',s,m') + hcCrj ' ,s,m')x fl (m 
od q)ipt>s m\%X^h£ o{zm$LLXV^ 0 Mz 

[0028] ifc, *|fiH3Hj3(tS^ -yb-^'flTU&nT 
L. ^TR6*GF( P ) «7U*g tL, ^Wfim^q tL, GF 

(p) tfmzti*m&imzt5\.vx. m&Ltzv^m 
eGF(p) t-rst^. k zm&mmnizt zwikt 

L, ri= g k (mod P ) *^4)S*Pltfe(t5 3 5>y 
b^ybtL. GF(p) XGF(p) ^tGF(p) ^x^ft^f 
fc^St^. ntm *f tiO^ftLfcfO"!, B)Sffl^ 

[0029] ifc. *5MHtfcttl.W«*5^ 
^mSS^^Ji, EG (p r ) , E ( G F 
(p) ) , E (GF (p 1 ) ±Tfc=5rS^S. 
[0030] 
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Tc^g tu ^<7)©s^q gf(p) jjmzti&w 

^^ZHV^X, #&UfcVv*;£i eGF(p) t-t&k 

ifiBPI^tS 3 5 >y M^hfcU GF(p) XGF(p) 
j&^GF(p) ^mm^i t-fhh%. r,km £f t i 0 
^BILfcf (rj , m) £fflUTg^4z»lfc£{t£^ -y-fc 
-i^TcSr^t-f S ^ k Wmt . 
[00 3 1 ] If3f<Il2^0flT1±, *#fcGF(p* ) ±^ 

ictu mmte ) vm*% ti, ^mm* k 
l, gf( p ^ ) ijm^tihm^^zh^x.. m^Ltz 

Vrfcfcm eGF( P *) fc-fl-fci. k £g£##ffit£fc 
SSLiitfcL, ri =g k £3 3>yh.*yh£U GF( P 0 
XGF( P 0 *^GF(p r) ^W^ft^fitL, GF( P r) 

^^risac pr = {o,i, ■■■,p 1 - 1 } ^^m^wfc-r&f: 

^L/iw(fi(r 1 , m)) ^fflV^g^«Itfc(tl» 
[00 32] H*5l3«f6BBTI±, ft£GF(p) ±^ y 

(p) ±imztitzmmmz tu e(gf( P ))cotu£g 

fcU *<?>m£<\ i:U E(GF(p))±j£*3*i4#fefir 
SfcfciSWT, *&UfcV^*ieGF(p) fclTI>i:#.k 
£g£^'ffiItfc£SLStfcU R!=kG=(r x , ry) & 
r?$.yh^yht U E(GF(p))xGF(p) *»feGF(p) ^<7) 

m) Illtfc ttS ^ -y -t -i^'flTCS" «Tfg 

[00 33] m^A^mXH, #fcE(GF(p* ))±.<7) 

*vt-i?mmm%< l zt3ux. ?mikki, r £1 

KMt U «£GF( P r ) ±£«§^fitRffi||£E 
U E(GF( P r ))c7)jc£G fcU ^COfim^q fcU E(GF 
(P r ))±JE«S^I»g^^tfc^T. #&LfclrVfc£ 
m eGF(p' ) tfStlJ SSUS 
fcU R 1 =kG=(r Ii r y ) Sr 3 S -y M V Y b U E(GF 

(p 1 ))xgf(p^ ) *^GF( P r ) J^r&mVib-t&b 
U GF( P ^ ) jJp^RBSiZ pi ^?m&jri:-fSfc#. 

Ritm ^ta^mu zmzmtxm^xim 

LfZ7t (Fi (Ri , m)) £ffl^T#£4zE»ifcfcffl>,*'y 

[00 34] If*JM5^BJ!T1i, -y-fe-^fltTC 
Sg^^±^recovery-equation 5cS& Eljg-f Sfcft. 
mm (4. GF( P ) 3g, y fl St/' m, Mtf£Zq= {0,1, 
-,q-l) 3t, j&tfe fc*fU flg'y.X my 

a 6 ) 3ttW(g * y a J ■ ms e ) tetitvc, 

j,e *«2flS«0f«ft#CfMH«'CfcS ({tSJft* 6*1.2: 



[003 5] ItSU 6 ^0>!T14. y^-^'flTC 
MW^<7)_hCOrecovery-equation *aH*|lIj»tSfcft, 
W&L GF( P ^ ) sg, y fl ma MVfcZ q = {0,1, 
-,q-l} 3t, j&y'e tMt. fife 1 y a j ,my fl e ) 
RL^fXg 1 y . : , rar ) (I^ji rr, 3S:ftt,j,e ^2 

[0036] ft*lM7O^0ilT1i. #tP< -y-k-^m 
ffig=&<50±Orecovery-equation Ife^Sr /Sft. 
^ilF (i. E(GF(p))3G a , GF( P ) 3m MVtZ 

q = {0,l,-,q-U 3t, j&Ve tML. F(tG+jY fl , m 

Xx(eY fl ))&tff(tG+jy A , m Xx(eG)) fcfc^T. 3^ 

skt.j.e ^2imx)fyw:#m (a^siit^v^ 

[0037] IMHS^BlTli. v-b-x 
flTtSW^^Ji^recovery-equation Jfe^Sr EMi~lfz 
ib. ?ffiFit±. E(GF( P ^ ))3G MA a . GF( P i ) 3m 
Mt/fcZ q = {0,l,---,q-l} 3t, jfttfe tWL. f(tG 
+jY k , m Xx(eY fl ))XVf (tG+jY fl , m Xx(eG))fcj3 
V^X. 3Mt,j,e#'2»{W#titl,§ (g 

[0038] mnm9 cowmxu, wtmz* 

fl7CMS^<7)±<7)homomorphismIjtSS: Mfflt h tzfo , ¥ 
«f tt. GF(p) srj, r 2 , m, g^y fl fcWL. r,=f(r 
i , m) <r$m***f ~ 1 (ri , r 2 ) S t & . ffi&O 2 

0t:MtTf -Mn/g, r 2 )*0(m,g) at/ 
f "^ri/y a , r 2 ) *0(m,y fl ) fc^l»it&#SfcL 

[0039] IMiffll 0^BBT14, St^t^ y^- 
^'llTCMW^^i^honiomorph i smljcS Sr 0jS-f 5 ^ . 
^«fiii. GF(p r ) si-!, r 2> m, g^t/y fl tML. r 2 
=f , (rj , m) CDi£&£m=f j - 1 (n , r 2 ) T"S«^I> b% , \i 
M(02mmt4>, ^^Ltfr^ri/g, r 2 ) ^0 
(m,g) aVfrKri/y fl . r 2 ) ^0(m,y fl ) t=5r4^fc 

[0040] If ^11 1 1 <7)%0>lT1i, #t#t^< «y-b- 
^l7cSS^<?0±^homomorph i smJj^ & HJji^ htzth^ 

it. E(GF(p))3R 1 , Y A Mt K 'tGF(p) 3 m 

atfrit^ft. r 2 =f(R 1 ,m)^itfI^m=f _1 (Ri ,r 2 ) T"Se 

mthb^. m^2mrmu, ^iznixf -h^- 

G, r 2 )^<Mm,G) Hrfff ~ 1 (Ri ~Y a , r 2 ) ^^(m,Y fl ) 

k%&Zb*mikLX^&. 

[0041] i**iii 2(T)%mxn, mzmzx «y-t- 

¥Ul£gm&CO jKPOhomomorph i smlfc* & HJii-f S 3t ft , 
^ffiFid, E(GF(p r ))3R!, Y a SVG Ml/'tGFfp 1 ) 
3 ifttfrjtd^L. r 2 =f(R 1 ,m)t03tfI^m=f ^(Rj.r,) 

(Rj-G, r 2 )^<Mm,G) St/f " 1 (R x -Y A , r 2 ) ^0(m,Y 

a ) k^tzk^mmktx\^, 
[0042] mmi 3cvwnxn. mz* ~y^-v\% 
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7tJSi|:g<7j_h<7)reco very-equa t i on , homomorph i smJ^^I Sr 
Ejg^-Sfcft, (r, y)^r +y(GF( P ) Jy<7)Jn 

g)T£iS3*U::i:£#8fcLTVV&. HSH 1 4 <7) 
%BJT1±. •7-b-^fl7CSgig<7)±<7)recovery-e 
quation, homomorph ismlj^tr 0j^f § fyo , TftftfUs. . 
(r, y)^r +y(GF( P ^ ) J^M) T"jgfl$ix&.r £ * 

[0043] If^II 1 5^gBB*C«. mz* -y-fe-^f* 
JLM-a-M^5_Li 7 )re((:. very-equa I ion . homomorph i sm.f'< 52 ; j; 

X, (R, yWR)+y(GF( P ) ±^M) 

■fc — > fM7r:'-+- JJ n toXO h^'recovery-equat ion , homomorph i 

#£fflWt, (R, y)^x(R)+y(GF( P ^ ) ±?«) X'%. 

[0044] 1 7«3&HJfCJi. •y-fe-v'S 

7C ; T J S-n^) KOrccovcry-irquation . homomorph i smTS: 
®mt ^flUi±. {a, , a, , -, « r } & 
GF( P * ) iOGF(p) ±C0mi&b-?&k^. GF( P r)(7)7Cx = 
Xjcti +-+x r a T ( xj, -, x r eGF(p))£*tL 
T, ?r( x) =Xj+x 2 p+ ■■■+x r P i-i T"SS£ifl&.rfc 

[004 5] M£JB 1 8<DftH)jTHU GF(p) -y-fc 

U WPI#:GF(p) «07C*g fcU *«OffiR*q fcU GF 

£x fl , £MH£y a =%* h b U #&LfcH*£i e GF 
(p) fc-f£fcK k £W4^'ffi«t=fcl>SlI[fcU r 2 
£n$ .y My h-r^ tm tJ;Olti:$ifil.GF(p) <o 

7CfcU r 2 ' =r 2 (mod q) b U ha, hb, hc£WI!gt 

z , xz , xz , *»fez , ^^ftfc-tftfcS, 

ha(r 2 ',s,l)k = hb(r 2 ',s,l) + hc(r 2 ',s,l)x A 

(mod q ) *»6s*^t«"c# i x o tan^r* z t mm 

[0046] if^II 1 9CD?tmxn. mzGFfc ) JyO 

Mtt U r SrIElli&fc L, lUttGFG* ) «7c£g t 
U ^^fiiSc^q fcU GF( P r ) ±5mztL&W%1j£ 

fcU #&LfcVv*;£m e GF (p r ) ft&k*. k £g 
£#**ffilfc t l> SlJ?c 1 1 , r 2 £ n 5 .y b * y r-n =g " 
tm fci *)m§.Ztl&Wm P1 ^7f:fc U r 2 ' =r 2 
(mod q) t U ha, hb, hc£W§ML , XZ,XZ, i> 
£>Z q ^^fitflifci, ha(r 2 ',s,l)k 
= hb(r 2 ',s,l)+ hc(r 2 ',s,l)x fl (mod q)i^s ^tf^L 

[0047] If*lM2 0<7)^BHT(±, #HE(GF( P ))_h«7) 

^-y^-^fiTcMw^^wjcs^m^-r^^fe. p * 

*PfiftGF(p) ±S«§^»nftitaS:E t 



L. E(GF( P ))<7)7r:^G fcU -t«fi3ft*q t E(GF 

(p))±imztiz>mir£izi5^x, mzi&xst&m 

eGF(p) fc-tifcfi, k tm&g&GMkb tttMb 

r^^7 b^ybR!=kG tm lz£*)W&Ztl&W 
(p) COjtbL^ r 2 ' =r 2 (mod q) t L, ha, hb, hcSr 
Wmi , xz , XZ , A^Z , ^ / ?ftt^l»t^, 
g^S. ha(r 2 ',s,l)k = hb(r 2 ,s,l) + hc(r 2 ',s, 

Dx a (»d q ) tpt> S ffim.~cz i i. o izmmh 1 1 
[0048] 1 <m*m±. mzEWfc ) ± 

ZmLbL. r £jjESICfcU *PIftGF(p^ ) ±Sg«§ 
tl^RWl^E bl, E(GF( P ^ ))^7t^G tL. ^« 
t«q E(GF( P ^ ))±S«§ixl>^^tfc^ 

m^LtzY^im eGF(pr)t-fl>t#. k 

**ffiStfc5i9jB:i:t, r 2 ^j > y h^y hR 1= kG tm 
KiDH^SflS^HJgZ pr ^jci:U r 2 ' =r 2 (mod 
q) tL. ha, hb, hc£3rHiBZ , XZ q xz q *>^>Z 
q ^^fcf^fcis ha(r 2 ',s,l)k =h 

b(r,',s,l) + hc(r 2 \s,l)x fl (mod q) *>fes ^ItJlT" 

[0049] ft*3l2 2COmmXli, mz* y-k-S^L 
7CMS^<7)±^signature-euqaionIj(SS: HUi-f S ?t 
46, ?0ha,hb, he {± s r 2 ',s ^Z q <^7tbthb%, 

MLT. <Jcc0Z.O<?^fefrl. ha(r 2 ',s,l)=ha(rr 2 ',ss, 
1), hc(r 2 ',s,l)=hc(rr 2 ',ss,l) (7)t §hb(r 2 ' ,s, l)-ha 
(r 2 ',s,l) =^hb(rr 2 ' ,ss,l)2. ha(r 2 ' ,s, l)=ha(rr 2 ' ,s 
s,l), hb(r 2 ',s,l)=hb(rr 2 ',ss,l)t?)i:#hc(r 2 ',s,l)-h 
a(r 2 ' ,s,l)*hc(rr 2 ' ,ss,l) m^ttZb ZfflSlb L 
X V i h s 

[00 50] If*ll2 3^0flT1i, -y^-ym 
7tS O Jy^s i gnature-equat i on , IfcWSCSI ^ 0jlW 
Sfoft. 2^fiha ; hb,hc(i. ha(r 2 ' ,s,l)=r 2 ' , hc(r 2 ',s, 
D=stL, hb(r 2 ',s,l) 14, r 2 '=rr 2 ', s=ss«i:# s hb 
(r 2 ' ,s, l)=hb(rr 2 ' ,ss,l) , r 2 '=rr 2 ', hb(r 2 ' ,s, l)=hb 
(rr 2 \ss,l) C0b%. s=ss, hb(0, 0, 1) SjSfc-f 

[005 1 ] ft*!! 2 4^BflT1±, 'y-b-yfl 
7iMM&<7) Jy<7)s i gnature-equat i on , JtM&^ & 031^ 
Sfcft. ^fSha,hb,hc(i, ha(r 2 ' ,s,l)=s, hc(r 2 ',s,l) 
=r 2 'tU hb(r 2 ',s,l) i4, s=ss, r 2 '=rr 2 ', C0t#, 
hb(r 2 ' ,s,l)=hb(rr 2 ' ,ss,l) , s=ss, hb(r 2 ' , s, l)=hb(rr 
i',ss,l) COb%, r 2 '=rr 2 \ hb(0, 0, 1) ^0 Zffifc 

[0052] tt*H2 5?mmxn, mzx -y^~=jm 

jtmS^,CO±COs i gnature-equat i on , £ W6£t 

htztb. ^ftha,hb,hc(i, ha(r 2 ' ,s,l)=s, hb(r 2 ',s,l) 
=r 2 'fcL. hc(r 2 ',s,l) r 2 '=rr 2 ', s=ssio>#, he 
(r 2 ' ,s, l)=hc(rr 2 ' ,ss,l) , s=ss, hc(r 2 ' ,s,l)=hc(r 
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r 2 ',ss,l) <7)k§=, r 2 '=rr 2 'hc(0, 0, 1) *0 £3ffc-f 

[00 53] IMII2 6^HJT(±. -y-fe->*g 
7cM#%^±^signature-equation, Jt^S^IUj^f 
^ha.hb.hcJi, ha(r 2 ',s,l)=r 2 ' , hb{r 2 ',s, 
l)=skL, hc(r 2 ',s,l) 14, r 2 '=rr 2 \ s=ss<7)kK he 
(r 2 ' ,s,l)=hc(rr 2 ' ,ss, 1) , r 2 '=rr 2 ', hc(r 2 ' ,s,l)=hc 
(rr 2 ',ss,l) (Db^, s=ss, hc(0, 0, 1) ^0 Zflltrt 

[0054] if*ii2 7<mmri±. mzs >yt-^i 

7cMS^^±«signature-equation, itm^M^WMf 
Sfctf), ¥flha,hb,hci4, hc(r 2 ' ,s, l)=s, hb(r 2 ',s,l) 
=r 2 'tL, ha(r 2 ',s,l) {4, r 2 '=rr 2 ', ha(r 2 ' ,s,l)=ha 
(rr 2 ',ss4) ^kc?, s=ss, s=ss, ha(r 2 ' ,s, l)=ha(r 
r 2 \ss,l) <7)k#, r 2 '=rr 2 \ ha (0,0,1) ^0 imtrt 

[0055] mm.2 8<&m&i. mz* vt-im. 

7cSW^^±^signature-equation, im^Mi&Mt 
hfztb, 2pftha,hb,hc(4, hc(r 2 ' ,s, l)=r 2 ' , hb(r 2 ',s, 
D=skU ha(r 2 ',s,l) (4, r 2 '=rr 2 ', ha(r 2 ' ,s,l)=ha 
(rr 2 ',ss,l) ^tl, s=ss, s=ss, ha(r 2 ' ,s, l)=ha(r 
r 2 ',ss,l)£0k#, r 2 '=rr 2 ', ha(0,0,l) *0 £Wff 

[00 56] m&2 9C0mMXH. fSW -y-fc-s^t 
7cMW^(7)s i gnature-equat i on , JtW&£ £ WMt h ft 
ft, ^fShb(r 2 ',s,l) (J, hb(r 2 ',s,l)=r 2 ' +s +1 X 

•m^tih^b^mmbLx^h. m&3o<nmrQ 

(4, mfc* ■yfe-^mTCSS^^^signature-equati 
on, )kfflsm*Wm-&t&>* «ib(r 2 ',s,l) (4, hb 
(r 2 ',s,l)=r 2 ' Xs +1 X'&MZfL&Zbm'tfktlX 

[00 57] lf*If 3 1 (DftWTte, y-b-iSU 
7uM#£^_h^signature-equation, itffl&M£E\&t 
ttz^). ^fthc(r 2 \s,l) (4, hc(r 2 ',s,l)=r 2 ' +s + 

i xfemzii&zbzmLtLx^k. imm3 2<rm 

HJ3T14, &I,ZX ■yfe-^flTUSg^WJiWsignature-eq 
nation, ^fghc (r 2 ' , s, 1) 

(4, hc(r 2 ',s,l)=r 2 ' Xs +1 XgmZtL&ZbZWBk 

blX^l. 

[00 58] If*lM3 3COmMXi±, ftlZ* -yfe-xfg 
7imm&<7)±.<7)s i gnature-equati on , JtW&»£ 0 gft 

',-r:^K ¥«yia(r : ',s,i) (4. haay,s,i)=o b%m 
(r 2 ', s ) tfwmm (t'7bf-^«^, -r^*> 

^«B#r B 1) 5 r i: £#®k LT^S. If* 

ii 3 4 ^^0j5T"(4 , mz* v ^-^wmm^hoysi 

gnature-equation, lfc«S»^ 0»f Sfcft, SIS* 

Six&s £#LT, ha(r 2 ',s,l) ^0 TfcS i. o fcJRo 
X<&Zb£%mbLX^&. 

[0059] if*ii3 5co%mxn. mz* 



7CM#& s7)±5Ds i gnature-equat i on , JtM&S Sr ®Mt 
Sfcft. Wia(r 2 ',s,l) (4, ha(r 2 ' ,s,l)=r 2 '+s+l X 

t>&zb£WBibvx\i^. msmecvwMxii. m 

lZ^ >y -fe— isfgjiMM£?)±.?)s. i gnature-equati on, Jt 
«#g£0jBH-Sfc*>, ^«ha(r 2 ',s,l) (4, ha(r 2 ', 
s,l)=r 2 ' Xs +1 x*$>&Zb£imb IX^Z. 
[0060] WI3 7<DfgBJTT14, StGF(p) ±^ 

SkU q 2: (P/4) <qt^l>jE»atL, 
GF( P ) <7){£f[^q k&Sjcfcg kL, GF( P ) l:,i',v 
SS**^tiJV^. #&LfcVvfc£m eGF(p) fc-fS 

k#, SLJtk 3SyMybn=« k km fciOH 
j£$:fl&GF(p) <7)7tr 2 i)\ 0<r 2 <q k^r* i -5 tfc 

0 , ±IEi&H£EB£3*i*:r 2 m^zm^i b m 

[006 1 ] 11*113 8^0HT14, JfttGF( pI ) ±co 

SSk L. r rr^ M ., q £ (P/4) <qk&& 
lEfifckL, *fKIWF(P r ) rtS&tiM btcljtig b 

u GF( pI ) umztiimzttizis^x . mzift 

\,y%&* eGF(p^ ) b-flb^, 3$'y t-^ 

yvr x =g^ bm iz^mmtiiz pr = {0,1,-, P 
r " ! } <7)7Cr 23 5\ 0<r 2 <q bKiZofct*)* _bte*E 

[0062] HSJI3 9<7)WnXli, mzE(G¥(p))±C0 

*v^-iSimmm%co_tcDim$:®m-t&fttb. ? £ 
*ssctt, *pi*gf(p) ±jmt$titzmmmz t 

L, E(GF( P ))?)7U£G kt, ^-^fii^&q kL, E(GF 
eGF(p) fctstl, SLiik ^, 3S-yb^ybn=g 

k km dOfi^$ifxl>GF(p) ^7ur 2 ^, 0<r 2 <q k 

^SidtkO, Jiie*EH^P^$ti^r 2 &W^^ffl 
V^ik&WSk LT^S. 

[0063] lf*l!4 O^0flT14, ifttGF( P ^ ) _hc?) 
^•y^-/f*7uS!g^OJ:^»&0iit-|>^, p & 
SltkU r ^iEfiakL, WRBftGFtP 1 ) ku/A xr 
fcffRftiS^E kL, E(GF( P ^ ))^tc^G kL, ^^fi 
S^q kL, E(GF( P ^ ))±Mm^fihm^^zHU 
t, »*LfcV^*« eGF(p- ) ttSt^, SURk 

3iv b^yfr 1= g k tm (CiOfilfiS^ilSZ pr 
= {O.l.-.P 1 - 1 } 0<r 2 <q t^Siat 

kD, J^KfflSrRB^$^r 2 S:W^tfflv^^i:S: 
#®kLTU|, 0 

[0064] lt*l!4 1 (7)^T14, ^tE(GF(p))±^) 
^■y-fe-^a7CSS^iO±^*&@jit-|.3tto, «P3 

mm J4, Terras**? k^i>GF(p) ±iotin«^ffl 

^hZbZmfflibLX^h, li*JM4 2^HJ5t"i4, # 
^-y-tr-^fl7CSS*<7)±W^»&@^t-|»^to, S 
£UfcVvfcni C*ft, in -raitflhash(m) 
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#£E(GF(p))±^ ■y^-^flTuMW^^Ji 

TC^g fcU ^ftt^q fcU GF(p) ±^$fLSW 

»=? s a, #SLfclvfc£i eGF(p) k 
i: SSURi: U 3S 7 Myfn=gk 

it. r x ' — Fj (mod q) , m' = 111 (mod q) tL , h 

a , hb, hc£«iz q xz q xz q &t>z q warn 

bthb%-. #&3$£, hatrj'.s.i'Jk = hb^'.s, 

■') + hc(rr,s,«')x fl (mod q ) &t> s mm-ct&x 

[00 6 5] 4CD9tmX'i±, #(;E(GF( P ))_h<7) 

^-/^-^fX7uMW^^±^»^0)S-ri>^fe. P £ 
*ttUr £iE8l*fcU W*GF( P ^ ) iOjC^g b 
U ^ftf^q fcU GF( P * ) J^S3*l&#&*5$ 
fcB^T. #frgA «gg|£x A . &M8£y A =g*« 
fcU »SLfcV^*i e GF(p r ) fc-f&fc#, k SrS 
^fj^ffit t 1 S SLE L . n s -v h x > h r ! =g k b 

u gf( p ^ ) a^wnsz PI ^^«^7rt^i>fc#. 

V sjrfrj) (mod q) , m' =7r(m) (modq)fcL, h 
a, hb, hc^Wmi q XZ q XZ q j&»£>Z , 
fc-fSfcS* »fe^*, Mn'.s.i'Jk = hbfri'.s, 
m') + hc(r 1 ',s,i')x fl (mod q) j&»6s if%\%X'% h i. 

[00 66] 11*514 5Tli, ^E(GF(p))±C0^ -y-fc 

L, WISftGF(p) ±£a§^/iflRft^^E fcU E(GF 
(p))<7)7U^G fcU *Offl*£q i:U E(GF( P ))_hS« 
SfUSfetHittliiVvC, #&Ufc^:fc£i eGF(p) t 

-r-s t # , k m^mmmizb im.t u ns 7 b 

^yf-R^kG tU E(GF(p))s&»feGF(p) ^?ftjpt 
rl" =p(Ri) (modq), ■' =m (mod q) 
& L. ha, hb, hc^RSKZ q XZ q XZ q jpbl g a. 
^ftttl-t^, ha^'.s.i'Jk = hb 

(ri'.s.m') + hc(ri ' ,s,m')x fl (mod q) fj^s //ifJt 

£4-3 tfltfig-f S ^ b ZWtikb Ul^ . 
[00 67] 11*114 6C0%mXU. mzE(GF(p))±.<7) 

^^^^mmm^)±.mm^mm-^tz^b, p £ 

«tiU r IrlEffitfcL, ^#cGF( P ^ ) ±£jft£tl 
fflftlJE tL, E(GF( P * ))C?)7U£G tU ^Ofir 

sc^q tu e(gf(^ ))±Mmztihm&Ji^z3o^ 

X., g£Lfcvvfc£i e GF( P r ) btlbZ, k 
^ffiSttSlSLISfc U 3 b^ybRi=kG b L. 
E(GF(p r ))j^GF(p r )M?)?ft&pJ:tl,tL, GF( P 
r ) *^«IZ pr = {0,1.— ,P="i J^o^ffi^wfc 
-fl>fc#. = jr( p(Ri)) (mod q), m' ^Tr(m) 
(mod q) b U ha, hb, hc^ffigigZ q XZ q XZ q 
i^^Z q **SSr, ha^'.s.m') 

k = hb(r! ' ,s,m' ) + hc(ri ' ,s,m' )x fl (mod q) £p t>s 



mm?z txo \,zmm& z t mnb ix 1 \& 0 

[0068] !f*l!4 7c7)^T"(i, ^E(GF( P ))±(7) 

fix., mmm^^mmi <ttymmp,*tm^x. 

R ^x(R)^L<ii:R^y (R) X"^Ztl&Zb**m. 

w{±> {«!,««,, -, a T ) £GF( P ^ ) W( P ) J: 
<7)Sfit-r-g>t§. GF( P ^ ) cr>7ux=x 1 a 1 +-+x r 
a r ( Xi , x r eGF(p))^^LT, ?r( x) = Xl 
+x 2 p+ -+x r p r-i T«§^l>it£#StLT^ 

[0069] 

[0070] 06(±. *mitfmfozti&&m : r 4 

> 1 m ./ri^fM^ s . *@(cfc wc s 1 (±aff 
S. 2(4rV^^afI0HT^I»o 3-6(4, 

^^;wifi@^2^m$^^--^s* (jar. m 

t Ti-Hfj fid) A, JL-HfB, i-^U s JL 

-1fVT*4. *@t^tJ:^(c, affffl^f*#i4, >- 
XfM7^-^tU, 2il¥^5 1 2h"7 hfHSil 

g« =1 (mod p ) 

btcim^mm am) ^2 5 6h- 7 h*)sa»q? 

*SSSRg, GF ( P )±T'f (r ls m) =r x +m 
(mod p) ^LT^^^fif -!^f - 1 (r, , f (r 
! , m) ) =m (mod p) ^SWyt-^X^ 
, ZgXZgXZgKZg^ftt, ha (r 
2 ', s, 1 ) = s „ hb(r 2 ', s, 1 ) = r 2 ' 
+ s + l (modq ) „ he ( r 2 ' , s , 1) r 2 ' 
^fc-tMftha. hb. hc^yXfM-?/;-^^ 

[007 1 ]^:, H6 1 1^-— 9 1 ' 
3-6«;o^TPIt^. 07(4, 

V^T. 1 K4ffi«^^*^#gPT"&S 0 12(4. W 

®m%^x$>&» i3i^$mmftimT$>&. 14 
(4. mmm&T&z. 1 5(4, 
gp^s. 1 6(4. fflfflmmuxfo&, 

[0072] 1 3 1(4^W^M1 3m@CD2* CO 

p^mb-tmMmmxht. 132(4. m<mm 
t))&Lmxfoh, 1 3 3(4, mt<mM-%f>x$>i« 13 

4 (4 . H3 1 < SfficaJTfc S„ litT. ±l5#m^ffl^ t 
^^Tl^J-ri-o f»MlSfftlfl 1(4. #3-- 
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-r 3 - 6 ( *n-c(i^— r a ) & ^m^msmm 
. ^-if'^-tf- k zmixvmmxg 

d SUt(4 P fcRt< 5 12t'7btUM s 

^IMltfM 13(4. 2 MLSMii? 1 2 0%4z§ 

[0073] ««i 4(4. ^r^fwan 3« 

ISL/i^-^t ^«^MJ£LT«iiL. ROMf 

Hffl*aff«^l 5(4. #i-ito8HM£*<0*f|s 
5 *T'#S^ff £ L&V a 3 imtt . *M$l»*a§l5 1 
6 (4. «sa^*^«tc?)^^i«fcJC tTfiffl t d 

[ o o 7 4 ] act, &wf&*is 1 3 izx&wmm 

mz-v v ^fJSW 5 . &HMtf&£S 13(4. g c7) 2 " HI 

^p^sttssij^iB'^i 3 1 tm& Y )ibim32 

t. aUt«l 3 0fclWatl 3 4i:*Wt4. S^2" 
«0n*i£i:-fS*J3S?iE1*Sl 3 1(4. g. g 2 . g 4 . 
gs -^g^2W^Si*J«p*i£f:i-S*^gi , g 
2 -. gi **^*>t»H«L*C. ROMCIBULT^ 
4. JWfcttfcSrf. p = 

1 1. g = 2&£>(4\ i= Clog, l l] =3fc=5r"3, 
2 3 <1 lfc$r£fctf>, g. g 2 . g 4 tLT2. 
2 2 . 2* £. jSHStJE-fSg! , g 2 . Si tLX 
2. 4. 5^E'ltTV^ 0 ffiBML^l 3 2(4. fg 
8«£S 1 2*^ 2MiimJ|$^K^c?331*n$- 

gi ^KOffi-r. £*u>, A^^mmtztiXM 

ttfttrt*. ^xa=l 0 1 (1 0MCO5) ti-i. 1 
fit3fi(#. g<7)2?)0Slfc2<?)2St) 

■f. SISgPl 3 3(4. &BMUP1 3 2^BK0aiLfc 
£ Wt^b^S . f mm l 3 4 (4. SOT I3 3«i 

^n^nT-MD. %cDM%mtbz>, im^mmm 

Ttft%t>t£, 2" = 2 5 = 2X2 4 =2X5 = 10 
(mod 11) btzh „ -tLT, i^fiJ^'J-— TAc?)^ 
HfcS^ »4^JT'g<7)^^^J&»fflL 
TV^<7)(4. g 3 . g 5 l^^Sffl-fi^iOfc-jR 
»WI^'}i< . 2}tT'#i)^l> ; t \,Zfoh 

[0 0 7 5]St, #&ttStf)i*iI£fT5 J--if"Affl<7) 



m9lZii^X, 3 1(4r 2 32 
(42MLi£fS£grai, 0 3 3(41"! jStSTg&T&S. 3 

4(4. aft* (m) 3 5(4. f waasT 

3 6(4. quest* £. 3 7(4. »ST"$> 
±fz. 3 3 1(4. r^HmgPrt^^fJ^IESSt- 
Sit. 3 3 2(4. \s\t<mmtiilWTfo&. 3 

3 3(4. ^t^stgarc**. 334(4. nt<wmu 

X'fo S . 3 5 1 (4. f P«E 3 5 ft^ftJtira § . 3 
5 2(4. I§lt<. WM. 3 7 1(4. »S3 7 

^q!i^ffium*i?3 7 ixhh, 372(4. ^it< 

3 7 3(4. ¥[t<±mMXh&« 
[0076] Hi OdfeWt. 3 8(4SK§PT"$>£ 0 3 
8 1(4. SKgP38rtOk-l^ma5T'*l> 0 382 
(4. Rt<r 2 +1M^T*I> 0 3 8 3(4. Rt<r 
2 x fl ^gPT'*l> 0 3 84(4. m<r 2 + l + r 2 
x fl mgPT'fe-g.o 3 8 5(4. nt<. SH-JtaiTA 

[0077] Jta. isZTJ*'UX~?cr)\^ ( a 1 ) 
fcSHM^^Jiai^ ( a 2 ) ^S^i. 
S^^H^ai^^^ii^ ( a 3 ) . r 2 ffiiJMB 1 
(4. ^fflflMfCI)^ 0 . 2 jtSLWfei! 3 2 b m A 

imtzfocvjc, mm r ^(4. n% fffict. «ts# 
#i±o 3-358 i-i i o i. fflisiiua-r. 

jWSi-lTti'JA^Sfl. (m) ^t-rs 

(a4) . 

[0 0 78] 2BSll^4^3 2(4. 3 

tz^cotztfy. mMB^mhmmmzm^tit. (a 

5) 

ri Sffl[»3 3tt, a64Sfut23ie9J8[k*fcf:fc:r 1 
^g^ (mod P ) commzX^, r x £S<tbh. z\cotz 

tmm 13 1. WM 0 tK LSP 13 2. 1 3 3 . fij 

g^l 3 4 tlSjtH^ffl^^fJ^IB'ISIPS 3 1 . £ 
JKi9mUlS3 3 2. StJiLS3 3 3. IM3 3 4ML 
TV^5. (a6) 

f«f&3 5(4. r t 81^953 3 "C^jS^fLfcr! t}l 
fi^CA^jgP 3 4 TlfcffiftSftfcSim Htt^7 
■fe-^'VX^^f SffifflLT. r 2 =f (n, m) (m 
od P ) <7>m%*ft\\ r 2 ( a 7 ) 

C\CDfz*b, (mod p) _hT"^r 2 =r t +m^g:Srff 

asii:s3 5 1 1. mv>p£mt~r&m£*}&bz>fi:iib 
P T-<7)f ffi^ff a nmu 3 5 2bmmix\,^. 
[0079] vMmm 6(4. h^tmm^-~mz 

iOA*3*utg*^^U- tIB'li L T u !> . 3 
7(4. fM^ii3 5^^A^S^r 2 fcqttOA/Wt 
K&fi 1 ^ (a8) . r 2 ^'qlil±t^(4. fr}*«JL^ 
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3 1 {zimth . 

[0080] ^comm^&nz. r 2 Miasmm, 2 

(a9)^r! tm^lr, £#, ZtlbMmXTsj] 
gfi 3 4 C A7J § ix"0 ^ ft mmXm b X f 3 5 

fiH^te, ^fcH&ftr 2 Jgfcqfc 
^MtK^ff^LftSfcv^Tn-b^*. g-r 2 # 
lEbKht-mTMimfZith. ifz. q-r 2 
fcSrfUJ, -^r 2 &SKgP3 7^aj^ft. 

»l?37i4, qI^SL^3 7 lfc?[§gg|53 
7 2fcJfclSESI3 7 3i:£|*|j&l/0^. qff^ftUB 
7 1(4, r 2 «A^J ? >ftfcqiB'fi§B6^4q»fB£ 

i^ttju gi#^aJ3 7 2tii*irfs„ ^i^mai3 7 2 

(4, i»l5W;qHr 2 ^ISgfcfra. ibfxSE 3 7 

3(4, 31 £31315 3 7 2^*ftfcH^0 1 M^tf r 2 

NflS 3 l ^ w tfflSrt- 5 ; cotzfo . ; wffi^IE £ =5: 

&tx±m^mzm<9mLmftzti6^tt%&« & 
Ni&t-ft . 

[0081] SKgfl38(4, iMsKs ( r 2 +s + 

1 ) + r 2 x a (mod P ) commzk 0 , i!flM#ifc& 
lX>vb-i?*ftm-& (a 10) . Hl4t=^tJ:a 

^LT, fijgLT^ftk- I*** 3 8 
1(4, 23SSl3»[^S3 8 1fcTl6±§)hJt, ZlX^t 

nmm ixim it: r j q*stfc ^ a 

^^Ifcfc&ofcSlJSka^l its, ; 

<7)^£afc-fft„ 

[0082] |s|t<, r 2 + 1 Mitt! 3 7(4, 
£r 2 telfcjDiS. mi<. r 2 x a iM383 
(4, #M37*^A7J§fL/Sr 2 tH*L^V«^ 
IS'ligP*^A^$iX^x fl fcc^f^ftft, r 2 +1 + 
r 2 x fl ^^3 84(4, r 2 + 1 3 8 2 

DUtltzr, + lbr t x fl itggB 8 3*^X3)3*1 
tr 2 x fl fcc?)ft^ft5 e %i3, ^ft^bi^fto 
sifJUSB 8 5(4, k- liUJtSB 8 1 ift&btiat r 

2 +l+r 2 x fl ^m^3 8 4*Wfcbt^^fflL 
T, s ■ a=b (mod q) ^ts^-^V^K 

mg^iift . 

[0083] JiLkCDt S^^fft^fi^f B 

^, (r 2 , s) imzxbLxmmztL&zbb* 

ft. (all) 

hi K4, m^x^itLtz^-mpmm^^m^ 

fi^tmxfct) , HI 2(4ffifi!cEre3 f >ft 0 ^HCrfc^ 
T, 4 HiSffS-C&S. 4 2(4, tm&T&h. 43 

(4, qiaitasTfcs. 4 4(4, yaEitafcfti. 45 

(4, r 2 lEHSFC**. 4 6(4, s iEttST* ft . 4 7 

(4, giees?**. 4 8(4, r 2 + 3 + imvMth 

4 9(4, y fl 1/5 (mod P )?f|«?'l>ft 0 4 1 0 



(4. ml im|/, 11 1 ii v 

A n/« (wodp)mM&T$>&. 4 12(4, g(r2 + l + S)/S 
(mod pJStmarr&S. 4 13(4, r x =g(ri + i+s)/s 
y fl ^/s (»dP)atJiafCft$. 4 14(4, f^RBKil 
T'$>ft 0 

[0084] gflSH 1 (4, f£g£;£ftftffi?W-— *f , 
4-Afc^ft, j^cDittfl* (r 2 , S) £gf|-rS (b 

1) . MH54 2J4, gft#£ •■r^^.T. r 2 -q£lt 
IL(b2) , iE^HEES£^t LT^trfftM 

£o#&£jg£-rs (b3). tizzotmb^ mmfflz- 
— ft R] t < q f a'ii?4 3 iz h t> & tub q £ tan l t ^ 

ft. y fl IE'ltgP4 4(4, }iff»Mf*^j; O&BBSfuty 
[0085] g!BO?47k, Rt<£>^>tfeg£ie 

iiLTi>ft„ r 2 iB'g.gP4 5(4, mm4 2t^mm 

Ltz r 2 SrfEtlU s IBSM4 6 (4^ t < s ^ IB»t 
ft. 5rfc, r 2 tstOK^it(4, ^S^ilffS^t 
*-?§&$ilft 0 r 2 +s + nf»:i548(4, r 2 IB^ff 
M4 5 b sfB'tii54 6 3&^^-P^lr 2 i; s SrjE&ft 
Uftltrj +s + 1^4, y, i/s (mod P )M 
3ti54 9(4, y fl IE«9S4 4*>fey fl & : S|E«aJ4 6 
frfesiit»aiUy s 1/5 (mod P ) g s 
(mod P )?gmgP4 1 0(4, s!E'i^46^s£, g|B 
1t^4 7*^g^^tilLT, g 1 ^ (modri&^gt 

5. y A r2 / s (mod P )M^4 1 1(4, r 2 IB'S^4 5 
^fel^aiLfcr, fcy fl i/s (modp)&?||^49^ 
&R»ffiLfcyA 1/5 (mod P )*fci:t:) , 

(y A 1/s ) &r 2 St, ^C^^P^^ttftfJ^^ 
*ftft„ g (r2 + i + s)/s ( mod P )^gp4 1 2(4, r 2 + 

s + ni®a54 1 8^r 2 +s + l&fI^fiiL, g 
i/s (mod P )<m34 1 O^^I^tilL^g 1 / 5 (mod 
P)£r 2 +S + 1SL, ^H^^P^ffit^-ftfJ^^* 
ftft. 

[0 086] I"! ^g(r2 + l + S)/Sy fl r2/E ( mod p)^ 

U4 1 3(4, y fl r2/s (mod p)^354 1 wmmk 

t g(r2.1 tS )/ S (mod p)^g^4 1 2^)igEfS*t^ 

6. n = g Cr2 + US)/S yfl r2/S (K)d pJ^aWtti 

0, r-i &*feft (b4), fi KSM4 14(4, MS 
f-^ffifflLT^Er, -rj &frV\ m^^ftft (b 
5) . 

[0087] &±c?Mmz X 0 , JL— f B(ii— TAW 
jMftS;*^ m S: A^ft *\ ^^SjM^igft^&gH 
Lfcy* CfflSt-ftl5^Hx a ^3aioTV^^(4J--if 

(4, flE*»ti-r A<7)g^T*ft fclWft (b6). 
v^C, lJJLh^lMt^Dfi^^ft*\ JjLh<0#JBtfe 

ftftafi3:co«!, #S^iK^tt(;LT^, 
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[0088] hi (i, z<o&&!frwe$mLttm<o 

( l ) ty^-tiSWIS 

P Zmmtl, GF(p) COTU^g fcL^-cOfiicSrq fc-t 

.1 iT"p ~q fcfcS, 
[0 0 89] GF(p) XGF(p) *>feGF(p) ^c^Sf Sr. 
f( ri , m)^ ri +m (mod p) 

f -1(^^(^,10))= m (mod P ) 

fcU ZqXZqXZq*^Zq^<7)^ft h a , h b ,h c Sr. ha(r 

2 ',s,l)=s, hc(r 2 ',s,l)=r 2 'i: U 

hb(r 2 ',s,l) =r 2 ' +s +1 (mod q) 

ha(r 2 ' ,s,l)k= hb(r 2 ' ,s,l) + hc(r 2 ' ,s, l)x fl (mod 

q) 

[00 90] -fey^-Ji, LTp 
, q , g , f, ha, hb, he i<0»&\ 

( 2 ) JL-lTt i 6S*M^^fc»^«H«»^J«aV 
•fe >- * U 3fc£§B»ofi8. 

[0091] jL-iTA*«, * v^-^fiTcsw^am^ 

^ffiy A = g* fl (mod P )££)£U £j«Lfc&Bi«i 

( 3 ) ^-^Aiz£&m%<7>£jKBt.Tmtt 

1. 2JtSJ&k 7°n?7MZ<?)~>t~>X>m$-Z>, 

[0 0 9 2] 2. OTc^gfclKfcfr a . 
2-Drj ^g k (mod P ) , 

2-2)r 2 =f( ri ,m) (mod P ) -(c) k^th. 
2-3) q=Sr 2 ^*f^, SSJiiEltMO. M*-g.23tSLiC 
* 4 . 

2-4)sk=(r 2 +s+l)+r 2 x a (mod q)-(d) i 9s fcffttt 
[0 0 9 3] 3. ±IB2T4jj6Lfc(r 1 , sJSri-^B 

(4) fBfciS^fl Ltz^v^-^Wt 

1. q gr 2 ^tii\ #&£fEffi^S. 

2. r!=g U2 + S + 1)/ Sy ^ U/BfBQd p)£ft*U 

f - 1 (rj , r 2 ) =m (mod p) 

[ o o 9 4 ] mz, &±m&mimmz^uxmm 
■v m y hr ^mmmema) con izwm 5 ?-** tm 



(*)1: GF( P )3g, y A S.V'm MV'CZq= { 0, 1, -, q-1 } 
at, j&tXe £*f U f (g 4 y fl j , my fl «) &tff (g 
* y » i , W ) fctJWC, 3M*t,j,e #2®9tt8 
5^T"#g^t"$)l>o iCOtzib^ recovery equation Jfe^ 

[009 5] 2: GF( P )3r 1; r 2 , m, g&y'y fl fc#U 
r 2 =f(r 1 ,m)^itfi^m=f -i( ri ,r 2 ) T"£jt^i>t^ ffi 
S<02ggftHRtf, <MdtfLTf -Hn/g, r 2 )^(m, 
g) RVf -'(n/y, , r 2 ) ^(m,y A ) fc&S^i^ 
<k Bift&ti ^^§^l/S30W^S(recovery-equa 
lion a Hack , using g and y „ , and homomorphisiu a 
ttack)*0jirCSft. 

[0096] £fcJrJE£Sfcffl?)J; o m®,2tifz* >y-fc 
-^'ft7CffiW^*§^\ #*^J^(b')^J; 3 fc#&5S 
Offi»(a,b,c) #(r 2 \s,l) «IItl^ftl^<, 
^«ha. hb, hcSrfflVvc^Sfucu*.. d^fllha, 
hb, hc#'(**)r 2 ',s £Zq<7)7£fc -fS fc § , ^ftBSSfl 

1. ha(r 2 ',s, l)=ha(rr 2 ' ,ss,l), hc(r 2 ' ,s, l)=hc (rr 2 ' , 
ss,l) <7)t #hb(r 2 ',s,l)-ha(r 2 ',s,l)*hb(rr 2 ',sB,l) 

2. ha(r 2 ' ,s, l)=ha(rr 2 ' ,ss,l) , hb(r 2 ' ,s, l)=hb(rr 2 ' , 
ss, 1) COt % he (r 2 ' , s, 1) -ha (r 2 ' , s, 1) *hc (rr 2 ' , ss, 1) 

(signature-equation attack using g and y fl ) SrHIjg 

MWkMzWV^XH. L.Harn and Y. Xu, "Design of g 
eneralised EIGamal type digital signatureschemes h 
ased on discrete logarithm", Electron. Lett., Vol. 
30(1994), 2025-2026. m U\ ttz, ISSMffltOX 

0^§^lO<7)PlI(redundancy attack) 

mzzcot§ik. q.^p\ l zn^uw / <itm^b< 

2 -4oo t/ j N §<^<^ i/3 s l/2^l>^t(;J; l 9, 
[ 0 0 9 8 ] &t5, ±a!«feM(if +m t Ltff 

ztntmm^w-m-f x\ (*) &gf^-t 

S^ftttS^i^Ui. ha, hb, hdzMLX 

, ^ i> itwMf^ r ffl ^mmtnix 
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[ o o 9 9 ] ttz . tm/immww) v*- 

±iE^W£2r^(4. J>cyfe-^it 
#frtSffcfc9fc, m SOTS#>£>*UtRC 4. 
RC 2^Wv>^^£;faLfc;vy;^41tdtfl/C 

IEL < Uit^fih Z t -y ?-f § ; fc"C#&£«B 

[oioo]it, iMsm^n^it. &3.~f<mm 

i4. #««4GF ( P ) ±72:3*1* t^fc Uzi>\ 

t(4. JMJtMttiftfi (mod P ) "CffMXii (mod 
P r ) T'^fOtfe^D. rj fcmS-GF (p 

r ) XGF (pi ) HGF (p 1 ) ! £fflH 

T^fUdlL ^ffifcSgfcGF (p 1 ) A^*HSZ 

P r = {o, i, -, p'-i } wy$mz%ii&&m 

[OlOlliiJ, Ui , a, ,-, 

a r } £GF ( P r) (?)GF ( P ) ±c?)S®i:-rSi: 

GF (p r ) (7)7Cx = x l a { +'" + x r a r (x 
i , x 2 , -, x r eGF (p) ) (x) = 

Xl +x 2 P +'"+x r p*-x-fcmzii&« zco^m 

mi 3 CSrf „ ( a, JJEHftfifWi r = 1 iO^-T'fc 

[0102] *^Mt . s^w&fM. jmiisfco® 
m^tn*^^ fcfc*u ^tps*gf ( P ) ±<n 
mkmmmcomm\tx%< . mmmE (gf 
( P ) ) ±.(owm&$mmt&tiit>. Mzmmh& 

— r 3 ~ 6 ffmrnwrnx/Mmk^c ixco^x^a^ 

[0 103] yXf^^^^tUE (GF 
(p) ) fc. gWt^T^E (GF ( P ) )±<7)*7Cfc 
M=5r57cG*«jDi.^fL, p(41 0ji3 0fif<7)»$rC<fc 

;*ui. e (gf ( P ) ) ^^mmnwrnmrnm 
fojixvmzttmixiihMzmmx'fc&z t tz j 

[0104] ^at^js-c* n 1 1WJT11 p 



t^ja-— rMcopj^t afssu 1 3 1.23 imzit, §, § 
E , g 4 , ...(o P z%<ctm*.')>? . v. ^eict-f. 

T^Jt^fUdMT. G, 2G, 4G, -«t§£l 

[ 0 1 0 5 ] HI 5 aff»Mf*^^1(S^i52 

1 3tf)rta£flM£*-f. *Hfc7jcf±3fc. SiJ£l2'ffS5 

2 1 3 1 {4. G, 2G, 4G, 8G-ifot>frttb$tg. 

Lxmma <o.mi rnmmm.u 1 3 1 1 ije^ i 3 4 

fcSW.T£mai2 13 3£^rLT^£. ifc, 

0. AfflmtlX. E (GF ( P ) ) ±^*Y fl (=X 

A g) stun,, tmri. 
[0106] mi 6tc, m%mmmoj-—?A\mm 
»^b^t(4. 3 2\±2m\3m>mx% 

0. 3 4(4, jifi^A^iJTJ) ") . i*l^(4. SfcOl&l 
Se*feWfc*=Sr^»*V^ 2 3 3(iR! SifflcarcfcO, 2» 

3 2 T"%£$-tt£&m k EfiftTtG £ flu**: 

fikG^s*. ^^fiR^tti^-rs^ ^^ft. 

2G, 4G, 8GH^iG-fSG 2 , G 4 , G 8 
^^iaiSLtt^fJ*IB'[iSI52 3 3 1, 2SSLiEki01 

19 aj-rsiR oaiLa52332,iRoajLfc 

«r(C^JC-t§fJ^ld^2 3 3 1 [*! ( iiti{4 
2^*<^) ^JROajt, £LE&fi : a£ti:^2 3 8 

[0 107] 2 3 5{i, FHRTfcO, r 2 =m/x 
(R t ) (iodp)«oaiJttJ:Orj Iltx 
(Ri ) ttRj ©Xllit'l)^ 238(4. iRft^^ 

^r 2 t±ISSLitk^itt. ?l^sk= (r 2 +s + 
l)+r 2 x A (mod pJiOs^^ftSSKST&S. 

i^to. k-1 ( = a) £;&ft!,k-lffCJi:i52 3 8 

1. r 2 +l^*fc|,r 2 +1^^52 3 8 2. r 2 x 
A J|ft&r 2 x fl ^JjL^2 3 8 3, r 2 +l + r 2 + 
x fl ( = b) JfWri + l + r 2 +x A St*g|I2 3 
84, its ■ a = b (mod p) «fc 0 s £^fe|> s|fS:^2 
385^^)tLTV^ 0 

[ 0 1 0 8 ] mo dM^ffi*\ qT"^r< P f$> 

S^mi»^JtA^<M ; S:l> 0 HI 7(4. 
— fWfiDSH'CftS. *H(3fc^T. «fiH54 1. r 2 

i eeasa^ s iaMi54 6 im 1 hjs^ t ^ t ^ * 

V\ 2 4 7(4. fe^^tftG^|B'SLTU|,G|B'i^T" 
2 4 4(4. Y A Itfo^frtmimLXV^Y, IB 

[0 109] 2 4 8(4. r 2 isH(r 2 +s + l) 
/s^*ft^,(r 2 +s + l ) /sMM^Xh^, 2 4 
9(4. r 2 /s^ffcSrj / s St^Tfc S . 24 1 
1(4. E (GF ( P ) ) it«iifr 2 /sY, ^fio 
r 2 /sY fl Sl^aST&S. 24 12(4. Rt<E (G 
F ( P ) ) ±T«iS» ( (r 2 + s + l)/s) G^ff 

3 ( (r 2 + s + 1 ) /s ) Gmymxht . 2413 

(4. Rt<. E (GF (p) )±-C^HJrRi = ( (r 
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2 +s + l)/s)G+(r 2 /s)Y A ^ffoTRi 
24 14(i, ilm=x 

(Ri ) r 2 x (Rj ) J±e (gf ( p ) ) 

h. 

[0 110] ^*:4c\ qt r 2 O^/WbK^faSJig 

( i ) tyf-fcz&mmfc 

iom3 oK^mrnp 1 u gf(p) ±ff)7tff>mah 

kttimmmE tu e^fm^^^wcdtc 

[0111] GF( P ) XGF(p) XGF(p) ^GF(p) ^<tf? 
ffiha, hb, hcSr. ha(r 2 ' ,s, l)=s, he (r 2 ' , s, l)=r 2 ' b 

u 

hb(r 2 ' ,s,l) =r 2 ' +s +1 (mod q) 

ha(r 2 ',s,l)k = hb(r 2 ' ,s, 1) + hc(r 2 ' , s, l)x fl (mod 
q) 

[0 112] -fey^-ii, yXfAA"5^-^t LTp 
, E(GF(p», G, ha, hb, he fc^—m^iSt*. 
**6E (GF ( P ) ) Otf^Jite, J3'fi£«j 

aiiiAA«^ii¥6 - 13433 9*mzx9mi 
x^mm-fo&tztib, tnmms&b-?*. < 2 ) m 

[0113] i-fA*»fe . * ■/^-^ItEMW^I 

iff a fcto, ^^si^iiisw^L^MiiMfiffl 

gg|£x A fcU #j^S&Wii£ffiRii&E (GF 
(P) ) ±T«Jty a =x a G iftSr-te 

[0 1 11] (MTSM x, (±. -x-*f h-tMVhoiU 

( 3 ) j--- f : At i&m^&n 

1. SJ&k i4^fl>o 

2. 2«0SLftk££j£-f-|>„ fcjs, C^SLKfi. # 
iMm ft 5 *> <r> b ZtlX \ *h . 

[0 115] 2-1) E (GF ( P ) ) _LT\ jggRi =KGfc 
iO. Ri £f»fl>, 

2-2)^P±«OS^r 2 =«/x(R 1 ) (mod pJtiO. r 2 

x (M e (gf ( P ) ) ±jn 

jSPi^xiswrc**. -(e) tn 5 

2-3)Sp±<?)at3Sfek=(r 2 +s+l)+r 2 x fl (mod p)- 
(f) iOs fcftg-t*. 



[011613. (rj ,s) Zz.—fBtzmm-ft . 

1. i-ifA*^*)* ( r 2 , s) £gf|Lfc 

f BJi((r 2 +s+l)/s)G+(r 2 /s)Y fl =R!^E (GF 
(p) ) _hT-|tmL. Rj 

[0 117] 2. m =x(R!)r 2 ^ItE^S^t 

(a) tW^-TI»^T'^<. ^(e) W 

iotxJ^gSiiLTW^-LT^I.. -f&;fc*>, r 2 =F(R 
1 ,m)=m/x(R 1 ) t^|> 0 ;«F 11*' 

GF( P )3g, y A , m, l q = {0,l,-,q-l} at, 
j, e fclS+U F (tG+j Y fl , m Xx(eY fl ))&t/F(tG+jY 
fl , ■ Xx(eG))tJ3^T, 3«,j,e ^'2fflOftJM 
(MSJM^) "ffc^ mx (eY 

A ) , mx (eg) O^jgJfe^Srgtt^V^ 
[0 1 18] 2: E(GF(p» sRi, G, Y A , GF( P ) 3r 2 , 
■ fcM L . r 2 =F(R 1 ,m)tO®ff^m=F _1 (Rj ,r 2 ) TSitt 
5t§. ffi§to2SSftW!fttf, 0tMLTF - 1 (Rj-G, r 
i) *<£(m,G) aiff-KRi-Yfl , r 2 ) *<Mm,Y A ) 

IjS (recovery-equation attack using g and yA, and ho 
momorphism attack) 3r @jST"# h «, 
[0119] ifcJJBSSIWWJ: a tataS* «yfe 

£>ffi»<a,b,c) #(r 2 \s,l) CDW&fc^3?rm&< , 
^«ha. hb, hc£fflvVC?&g£ftTU|, 0 ^^ftha, 
hb. hc3&i(**)r 2 ',s £Z q (7)7Ct^l>t#. 
tl^^fa^^^X ^Tc?)rr 2 ' , astit LT , i^lo 

1. ha(r 2 ' ,s, l)=ha(rr 2 ' ,ss,l), hc(r 2 ' ,s, l)=hc (rr 2 ' , 
ss,l) UOi:^hb(r 2 ',s,l)-ha(r 2 ',s,l)^hb(rr 2 ',ss,l) 

2. ha(r 2 ',s,l)=ha(rr 2 ',ss,l), hb(r 2 ' ,s, l)=hb(rr 2 ' , 
ss,l) COfc #hc(r 2 ' ,s,l)-ha(r 2 ' ,s,l) ^hc(rr 2 ' ,ss,l) 

(signature-equation attack using g and v A) ; r @ffi~0' 

V^JtWKSItftV^Tti. L.Harn and Y. Xu, "Design 
of generalised ElGamal type digital signatures: hen 
es based on discrete logarithm", Ii lex Iron. Lett., 
Vo 1 . 30 ( 1994) , 2025-2026 . L V \ 

[0120] itz. ±m\cD£o%mmmm^b 
g wzmmmmip) ^ bmt<^^x\ mm 

< . mmzX 1O0»|I (redundancy atta 

ck) £0ig-t"#!> o tfz, i&omsmnximzm^ 
fzti\ ^tuimkmrnm-c. (*) mfzi-hcD%t>® 
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i o fcftJtt^'/h § i 5 £ b imt t v \ ha, 

hb, hcOHLTi, _hS«ft©(«)*fcoi^^,Mr 
tin. #*^#£^!>JtMI»«£ffl^ 

/sum LTt3S<5rs±at, s £> mnmti^ 

[o 1 2 1 ] ttz, mnmmxn, %.mm(p) o P 
tG ^mwrnK^ixo^mnm^m^tztp. a 

^fliHfftiMivti £\\ zob^tzi^ sn»fe 

[0 1 2 2] mi^ttWt|5|t<. X-y-fe-S* 

r^yi/Mm^EL<Wt^tih.Z b^x. >y?-?h Z t 

ifc, Ht<, E (GF (p) ) T"%<E (GF 
(P r ) ) -CtToTfciV^. 

[0 1 2 3] JL-yii, *^HHW^)4J«*Si 

mmmizm^xmmixzt^K *%mtm±Mi 

[0 124] 

ztix^&mmox v^-v'&mnzmhb^ 
mm&mm-h z t mm b%<o. z n-irctnt: 

4 VjHVRfflUz&^X . y-b-^'flTca^ 

n^mm-h z b mmb % o , ^^BftMBti* 

[0ffi^»5M] 

[Hi ] ^mm^^y^-mjmm^mimm 

[02] f£*OW^ Mgafl^JI^-MT'*-g>„ 
[03 ] «^ ■y*-^mM#S^«j£S*LfcS 

[04] IWfftM^S&W:J;^re 

caovry-equation Ij»«B|^JI£- tS L^0T'£> § . 
[05 ] |H|t< , redundancyIfe»O«B&0-C-* S . 

[06 ] *m&m* v^~i?wmm%M\tt>mn 
[07] iMmmmiz&ni. nmmm&mskm 
[08] nt<, mnmtmio^-^^wmym 

[09] |Slt<. #Safi2:fT^-->fAfiJ<?)r 2 ff-j: 



[010] ^t<. ^-iP'AffllJOSKgP&^tL/Sfi 
Jj£0T"J>£ o 

[01 1 ] mt<. m^^mb^-^Bcomw^ 

[012] ^t<. W^Sr^mLfe^-ifBfflJ^gp 
^M0T"S>§ o 

[0 1 3 ] g§ 1 mW<?>$mMt IX, GF ( P ) T£ 
< GF ( p r ) £ffifflLfci§&tf). BH&jrKiSGF 

(p 1 ) ipe>z tI = {o,i, -, p^-i } 
[014] *f|B8t« s * ^ -t- ^fiETtH^afi^n 
mxfohc 

[015] ±H»iJ(-i*;it£. /if, il'livi" 

E (GF ( P ) ) J:Tc^||te^frtSfc^fiifi£r*> 

So 

[01 6] ±IB^HfiW;fcitSW^^T&ff5i- 
-f AWM0-CS>I>. 

[017] Rt<, 5£*£Sflt-£^_HfB^«<0 

[His] Rt<, it ^^m^bbbtzm^ 
mm&^btzmxht. 

1 4»r 4 ^^aHffl»& ( #i-if^ 

2 ^w^'^a«««i 

3. 4. 5. 6. 'm^<i;?)vmmmw$ji%titz 

1 2 immt^. 

1 3 ^Pfl^fMSP 

1 4 ^wis^as 

1 5 mmmmmmm^m 

1 6 «^aaa 

3 1 r 2 

32 2jEaja^*sp 

3 3 n jfOtffi 

3 4 afi^A^ifE 

3 5 fRftS 

3 6 qPHSfcai 

3 7 ilM 

373 JtSSP 

3 8 SKgp 
38 5 sltmgP 

4 1 &m 

4 2 iaeaj 

4 3 qlB'IfgP (^-— tf'B) 

4 4 y fl sim 

45 r 2 fani? 
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4 6 
47 
4 1 3 
4 14 
2 13 1 
2 13 3 



glEttft 



S Y« R2/£ (mod P )?t3tii 



233 Ri MM.M 

23 5 FMi[gP 
2 38 SKg|5 

24 4 Y fl mmm 
2413 Ri mnm 

24 14 miM 



[HI] 



(l)-fe 



feat! : x A | 



li m|=r 1 + m .f" l (r,,r 2 )=f2-ri 

h|r 2 .s,l)k=Mi(r il ,s,l)+k(r z ,s,l]x J1 

ha(r ! , S ,l)=r 2 

Ittr^ll *,+! 1-1 
\ Mr„s,l)=s 



2-2.r 2 =t(i , I ,iti]Mp) 
2-4^=^+5+1)+^ 



£3 



(3) > y-fc-v^x; 

^ ( r a+s +iy Vl / s 

■ f'Vi.rjJsmdnod p) 



i-Hf A i-Hf B 








F 


y u =F(k) 

x u =S(X,y u ,K J IDu) 




S 








X 



^ r— , Yiy ut !:IDii^PiI^A1-5o 

: £ 3f' ^4-"tl-.'iwr p ; c=pi-F(y,y,TDu)^f+^r 5 „ 



[Hi 0 3 



I ^384 I 



n+l + r2x A (=b) 



(sa =b (modq)£8¥<) 
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£*9 



iaNr 



fit > 

q=g k (modp) 
j^=m/ri(irtxip) 

s^k—r2X A <mod q) 



(J) ^ ft- it* 
g s yA 2 = m ( m0!l p) 



g recovery-equation^ 



V M£Z, 
r 2 = My A "g« 



3. (r 2 , s)£m=My A e 



= g- v y A «'My A V 
=My A ^ 



A©¥S:£:^6 : m, r 2 , s 



r, - m / r 2 



'r 2 = r,' + nq (=*r ? ) 



Vl6 t 



3*® 



i=lA-. [logaq] 



g2 [log^J 



J*H ^13 


2 


133. 


m 
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[08] 



[H9] 



IE 



r 



I I ^ 




["g Ett^ e ■; -) 





,,331 


(a{i*®M(mXfc£i5W 


^33 |k 












, m 351 










..332' 
--333 
__334 

^36 




^TWa ^ 352 


*^(ilfii) 




i^g|I(mod p) 





oXBft I IE 

nsM^aa J sksb-\ 




f f!F(p>bZp r = (0,1,-P t A 



{«!,-, a ,}(*•. GF(p r )CDGF(p)±O^ 0 ) 



3 



zr(X)=x 1 +x z p+-x 1 J) r " 1 
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[Hi 4] 



B ,45 js ^4 6 




[HI 5] 

ZD ,2131 









G 


70 


4G 


SG 








Gi 


G2 


G4 


Gs 
















I B(UF(p)^,ha J hb,hc 





~^2 






















1- 







[HI 6] 
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317] 



[018] 




,249 I i 



(r2+s+i)/s^g:§B | 

2411 ^2412 1 ■f 



T i .2413 . 



maws 






R 


= ((r2+s+l)/s)Ci+(n*YA) 






j 2414 














x(Ri)n 





ba^AlTk tb(r 2 jU)+h* 2 *,l)s A 
tbfr S Al)=r 2 + S +l 



=.fr 2 .a)*:«fS 



